the mcpe dissector is not working

  • retag add tags

Hello, I use your dissector in wireshark, but when using it, it turned out that the mcpe dissector does not work, all mcpe packets are identified as raknet packets, what needs to be done for wireshark to understand that this is an mcpe packet?

s1and1's avatar
1
s1and1
asked 2023-06-26 19:51:58 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Sharing a sample capture file (not a screenshot!) through some file share service would allow us to have a look at what you're seeing. You can add the link the the question.

Jaap's avatar Jaap (2023-06-27 07:42:16 +0000) edit
more
  • delete

There is a sample capture on the wiki with a few MCPE packets:
https://gitlab.com/wireshark/wireshar...

(protocol reference: https://wiki.vg/Raknet_Protocol)

Chuckc's avatar Chuckc (2023-06-27 10:08:29 +0000) edit
more
  • delete

Sorry!

sample capture - https://mega.nz/file/8j1gyYTS#YMAVAk-...

s1and1's avatar s1and1 (2023-06-27 11:01:56 +0000) edit
more
  • delete

this example is recognized as a raknet packet

s1and1's avatar s1and1 (2023-06-27 11:04:36 +0000) edit
more
  • delete

Does this explain the situation a bit?

Jaap's avatar Jaap (2023-06-27 13:43:18 +0000) edit
more
  • delete
add a comment see more comments